file[.]exe | Triage™

General

Target
file.exe
Size 375KB
Sample221225-bc8fjaah69
SHA256 671a2aef426199523c5c10862b2b9a4368d476ec6306fd7a33a5ff3e51254d8d
MD5 b31e09e5972628629c70920a72c538ca
SHA1 f98438ac9a66ac1adf6970b449bba7501d59dae6
SHA512 89708493a1f6742af42597b6849a59a3c7448ed4834e59e999889039d9788a1e5f47df61f3652ff06a4f442a9d92202df3cd95bebe1c2516cf1f8b193c63d0c6
SSDEEP 6144:3R1LvsOclKiuWXBJWWQU/ggWN3z4nmhyFziTWETJraMC36X:3R17sVKiuWiWQ9hQm4EK9Z36X
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 375KB

file.exe

IMPHASH 1ea9f0326cf512ac0eb7dd4bc1a00a19
SHA256 671a2aef426199523c5c10862b2b9a4368d476ec6306fd7a33a5ff3e51254d8d
MD5 b31e09e5972628629c70920a72c538ca
SHA1 f98438ac9a66ac1adf6970b449bba7501d59dae6
SHA512 89708493a1f6742af42597b6849a59a3c7448ed4834e59e999889039d9788a1e5f47df61f3652ff06a4f442a9d92202df3cd95bebe1c2516cf1f8b193c63d0c6
SSDEEP 6144:3R1LvsOclKiuWXBJWWQU/ggWN3z4nmhyFziTWETJraMC36X:3R17sVKiuWiWQ9hQm4EK9Z36X
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

15920

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileApisToOEM SetHandleCount RequestWakeupLatency GetConsoleAliasA GetModuleHandleA CreateDirectoryExW GetLogicalDriveStringsW ReadConsoleInputA FindNextVolumeMountPointA SearchPathA CopyFileExA CallNamedPipeW GetCurrentDirectoryW GetSystemDirectoryA CreateMailslotW TlsGetValue GetProcAddress LocalAlloc GetCommandLineW InterlockedIncrement ConvertDefaultLocale GetConsoleMode FindFirstVolumeW LocalFree LocalFlags InterlockedDecrement ExitProcess GetCurrencyFormatW BuildCommDCBAndTimeoutsW CreateActCtxA GetConsoleAliasesLengthA GetPrivateProfileIntA _lread SetVolumeMountPointW GetSystemWindowsDirectoryA LoadModule lstrlenW CreateDirectoryA GlobalFindAtomW CopyFileW VerSetConditionMask CreateMutexW DeactivateActCtx GetDiskFreeSpaceA MoveFileW GetLogicalDriveStringsA SetEvent MoveFileExW OpenMutexA FindResourceW SetFileTime SetFilePointer FindFirstFileA EnumResourceLanguagesA FreeEnvironmentStringsA InterlockedCompareExchange InterlockedExchangeAdd GetModuleHandleW GetTickCount GetLogicalDrives EnumDateFormatsW OpenMutexW OpenJobObjectW LoadLibraryA GetLastError WideCharToMultiByte HeapAlloc GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapFree GetCPInfo GetACP GetOEMCP IsValidCodePage TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId CloseHandle EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualFree VirtualAlloc HeapReAlloc HeapCreate Sleep WriteFile GetStdHandle GetModuleFileNameA GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW GetFileType GetStartupInfoA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetStdHandle GetConsoleCP FlushFileBuffers RtlUnwind InitializeCriticalSectionAndSpinCount WriteConsoleA GetConsoleOutputCP WriteConsoleW HeapSize CreateFileA

gdi32

GetBrushOrgEx

advapi32

InitiateSystemShutdownW

winhttp

WinHttpWriteData

Sharing